https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 19 Sep 2026 04:23:52 +0000 https://vulnerability.circl.lu/sighting/583f1bf0-3dd2-45eb-ae02-691ff0df3eb5/export {"uuid": "583f1bf0-3dd2-45eb-ae02-691ff0df3eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netalertx_rce_cve_2024_46506.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Chebuya (Rhino Security Labs)\", \"Takahiro Yokoyama\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"An attacker can update NetAlertX settings with no authentication, which results in RCE.\", \"disclosure_date\": \"2025-01-30\", \"fullname\": \"exploit/linux/http/netalertx_rce_cve_2024_46506\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Unauthenticated RCE in NetAlertX\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"config-changes\", \"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/netalertx_rce_cve_2024_46506.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/netalertx_rce_cve_2024_46506\", \"references\": [\"CVE-2024-46506\", \"URL-https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/\"], \"rport\": 20211, \"session_types\": false, \"targets\": [\"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:47.081902Z"} {"uuid": "583f1bf0-3dd2-45eb-ae02-691ff0df3eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netalertx_rce_cve_2024_46506.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Chebuya (Rhino Security Labs)\", \"Takahiro Yokoyama\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"An attacker can update NetAlertX settings with no authentication, which results in RCE.\", \"disclosure_date\": \"2025-01-30\", \"fullname\": \"exploit/linux/http/netalertx_rce_cve_2024_46506\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Unauthenticated RCE in NetAlertX\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"config-changes\", \"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/netalertx_rce_cve_2024_46506.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/netalertx_rce_cve_2024_46506\", \"references\": [\"CVE-2024-46506\", \"URL-https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/\"], \"rport\": 20211, \"session_types\": false, \"targets\": [\"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:47.081902Z"} https://vulnerability.circl.lu/sighting/583f1bf0-3dd2-45eb-ae02-691ff0df3eb5/export Tue, 08 Sep 2026 06:48:47 +0000 https://vulnerability.circl.lu/sighting/4ae7f2e3-4841-4ebd-badc-ce319cb4fe0c/export {"uuid": "4ae7f2e3-4841-4ebd-badc-ce319cb4fe0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-08-03T02:14:00.846511Z"} {"uuid": "4ae7f2e3-4841-4ebd-badc-ce319cb4fe0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-08-03T02:14:00.846511Z"} https://vulnerability.circl.lu/sighting/4ae7f2e3-4841-4ebd-badc-ce319cb4fe0c/export Mon, 03 Aug 2026 02:14:00 +0000 https://vulnerability.circl.lu/sighting/8253db83-02a5-4985-83a9-fd744dbec835/export {"uuid": "8253db83-02a5-4985-83a9-fd744dbec835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-08-02T03:00:04.677749Z"} {"uuid": "8253db83-02a5-4985-83a9-fd744dbec835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-08-02T03:00:04.677749Z"} https://vulnerability.circl.lu/sighting/8253db83-02a5-4985-83a9-fd744dbec835/export Sun, 02 Aug 2026 03:00:04 +0000 https://vulnerability.circl.lu/sighting/be54bd28-3b47-4695-a940-ba656574739e/export {"uuid": "be54bd28-3b47-4695-a940-ba656574739e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-07-30T00:02:15.898875Z"} {"uuid": "be54bd28-3b47-4695-a940-ba656574739e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-07-30T00:02:15.898875Z"} https://vulnerability.circl.lu/sighting/be54bd28-3b47-4695-a940-ba656574739e/export Thu, 30 Jul 2026 00:02:15 +0000 https://vulnerability.circl.lu/sighting/0df9c0b0-030c-4d82-875e-526a74dea128/export {"uuid": "0df9c0b0-030c-4d82-875e-526a74dea128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-07-29T12:02:04.852771Z"} {"uuid": "0df9c0b0-030c-4d82-875e-526a74dea128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-07-29T12:02:04.852771Z"} https://vulnerability.circl.lu/sighting/0df9c0b0-030c-4d82-875e-526a74dea128/export Wed, 29 Jul 2026 12:02:04 +0000 https://vulnerability.circl.lu/sighting/b4c6dc59-22ae-474e-a462-918c31912250/export {"uuid": "b4c6dc59-22ae-474e-a462-918c31912250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mldf4rg56e2k", "content": "CVE-2024-46508 - Yeti-Platform JWT Token Forgery Vulnerability\nCVE ID : CVE-2024-46508\n \n Published : May 8, 2026, 6:16 a.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (b...", "creation_timestamp": "2026-05-08T09:10:43.357225Z"} {"uuid": "b4c6dc59-22ae-474e-a462-918c31912250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mldf4rg56e2k", "content": "CVE-2024-46508 - Yeti-Platform JWT Token Forgery Vulnerability\nCVE ID : CVE-2024-46508\n \n Published : May 8, 2026, 6:16 a.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (b...", "creation_timestamp": "2026-05-08T09:10:43.357225Z"} https://vulnerability.circl.lu/sighting/b4c6dc59-22ae-474e-a462-918c31912250/export Fri, 08 May 2026 09:10:43 +0000 https://vulnerability.circl.lu/sighting/063f6ae1-6455-4e4b-af56-0f96b6349cb1/export {"uuid": "063f6ae1-6455-4e4b-af56-0f96b6349cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlddsdd4p72e", "content": "CVE-2024-46507 - Yeti-Platform SSTI Code Execution\nCVE ID : CVE-2024-46507\n \n Published : May 8, 2026, 6:16 a.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before ...", "creation_timestamp": "2026-05-08T08:46:59.345596Z"} {"uuid": "063f6ae1-6455-4e4b-af56-0f96b6349cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlddsdd4p72e", "content": "CVE-2024-46507 - Yeti-Platform SSTI Code Execution\nCVE ID : CVE-2024-46507\n \n Published : May 8, 2026, 6:16 a.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before ...", "creation_timestamp": "2026-05-08T08:46:59.345596Z"} https://vulnerability.circl.lu/sighting/063f6ae1-6455-4e4b-af56-0f96b6349cb1/export Fri, 08 May 2026 08:46:59 +0000 https://vulnerability.circl.lu/sighting/790e7e3a-7cb0-4ee9-8a3f-fbfa02edbba8/export {"uuid": "790e7e3a-7cb0-4ee9-8a3f-fbfa02edbba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "published-proof-of-concept", "source": "Telegram/fKVTyseO1uYL9TllYOizt7PACaW5f67udAzHLYRojaAhnqE", "content": "", "creation_timestamp": "2025-12-28T03:00:05.000000Z"} {"uuid": "790e7e3a-7cb0-4ee9-8a3f-fbfa02edbba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "published-proof-of-concept", "source": "Telegram/fKVTyseO1uYL9TllYOizt7PACaW5f67udAzHLYRojaAhnqE", "content": "", "creation_timestamp": "2025-12-28T03:00:05.000000Z"} https://vulnerability.circl.lu/sighting/790e7e3a-7cb0-4ee9-8a3f-fbfa02edbba8/export Sun, 28 Dec 2025 03:00:05 +0000 https://vulnerability.circl.lu/sighting/e8e85e8b-fef4-4fba-9a4b-89a9699e7bb8/export {"uuid": "e8e85e8b-fef4-4fba-9a4b-89a9699e7bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"} {"uuid": "e8e85e8b-fef4-4fba-9a4b-89a9699e7bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"} https://vulnerability.circl.lu/sighting/e8e85e8b-fef4-4fba-9a4b-89a9699e7bb8/export Thu, 23 Oct 2025 21:13:03 +0000 https://vulnerability.circl.lu/sighting/3a0c326d-f689-4f2a-8d88-6ca8ba1b6b07/export {"uuid": "3a0c326d-f689-4f2a-8d88-6ca8ba1b6b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lylnhhezmp27", "content": "", "creation_timestamp": "2025-09-11T21:02:29.320716Z"} {"uuid": "3a0c326d-f689-4f2a-8d88-6ca8ba1b6b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lylnhhezmp27", "content": "", "creation_timestamp": "2025-09-11T21:02:29.320716Z"} https://vulnerability.circl.lu/sighting/3a0c326d-f689-4f2a-8d88-6ca8ba1b6b07/export Thu, 11 Sep 2025 21:02:29 +0000